When your individual information has not been acquired directly from you but from A different source, you need to obtain precisely the same information and facts as over (other than the ideal to withdraw your consent). The ecu Info Safety Board gives suggestions on the application in the GDPR. Info https://nathanlabsadvisory.com/red-team-exercise/